Splunk Join Two Searches With Common Field